Privacy
Privacy Policy
Last updated: May 2026
HolaSwitch is an independent, affiliate-funded platform that compares electricity tariffs from our partner providers only. We are not a neutral or exhaustive comparator. For an official comparator covering all licensed providers, use comparador.cnmc.gob.es.
1. Who is responsible for your data (Responsable del tratamiento)
- Entity: HOLASWITCH, SOCIEDAD LIMITADA — NIF B24833840
- Address: Partida Llenes número 29, B, 03720 Benissa (Alicante), Spain
- Contact / privacy queries: hello@holaswitch.com
- DPO: Not appointed — not required for our processing.
2. In short
- We strip your name, address, IBAN, NIF/NIE, phone, and CUPS from your bill on our servers, before any data is sent to an AI model. None of these are sent to our AI processor, and none are written to our database.
- We save your name and email only when you unlock your report — not when you upload. Analysis happens first, with no personal identifiers stored.
- Your uploaded PDF is deleted immediately after the redacted text is analysed.
- You can request full erasure at any time — two-step email confirmation, no questions asked: Delete my data.
3. What we collect and why
| Data | Where from | Purpose | Legal basis (RGPD Art. 6) |
|---|---|---|---|
| Email, first name | You, at report unlock (not before) | Send your comparison result; follow-up | Consent (6.1.a) |
| Marketing opt-in | You (optional, separate tick) | Marketing emails via Brevo | Consent (6.1.a) — withdrawable anytime |
| Current provider, postcode | Your bill / form | Tailor the comparison | Consent (6.1.a) |
| Tariff / consumption fields | Your bill (AI extraction) | Compute your comparison | Consent (6.1.a) |
| CNMC QR-code technical IDs (tariff code, contracted power, consumption — CUPS stripped) | Your bill's official QR | Verify our comparison against Spain's registry | Legitimate interest (6.1.f): accuracy |
| Consent records (incl. IP + user-agent, timestamp) | Captured server-side | Legal proof of consent | Legal obligation (6.1.c) |
We do not knowingly collect data from anyone under 18.
4. How your bill is processed
- Personal data (name, address, IBAN, NIF/NIE, phone, and CUPS) is stripped from the bill text on our servers, before anything is sent to an AI model.
- We use Claude (Anthropic, US-based) on the redacted text only, to extract tariff and consumption fields. No personal identifiers are included in that request.
- Your CUPS is discarded — it is never stored in our database.
- The original PDF is deleted from storage immediately after analysis. At this point we hold no personal identifiers — only anonymous tariff/consumption figures.
- Only if you choose to unlock your report do we ask for your name and email, which we then link to your result.
You always complete your switch directly on the provider's own website. We do not handle contracts and we never send your data to partners.
5. International transfers
Redacted bill text is processed by Anthropic (Claude), in the United States, containing no personal identifiers. If you accept marketing/analytics cookies, Google Analytics (US) and Meta Pixel (US) also load. These transfers are covered by the European Commission's Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework. All personal data (email, consent logs) is stored within the EU.
6. Who we share data with
- Processors: Supabase (EU hosting/DB), Anthropic (AI extraction, redacted text only), Brevo (email/CRM, EU), Lovable (site hosting, Cloudflare edge). Each acts under a data-processing agreement.
- Analytics & advertising (only with your cookie consent): Google Analytics (US) and Meta Pixel (US) — load only if you accept marketing/analytics cookies.
- Partner providers: we never send them your data. You always switch directly on the provider's own website; we do not handle contracts.
- We never sell your data.
7. Retention
- PDF: deleted immediately after analysis.
- Extracted fields, email, comparison data: kept up to 5 years after your last interaction (Spanish contractual limitation period), or until you request erasure.
- Consent records: kept as long as legally required to evidence consent.
- On erasure, all of the above — including the QR audit record — is deleted.
8. Your rights (RGPD / LOPDGDD)
You can access, rectify, erase, restrict, port, or object to processing of your data, and withdraw consent at any time (without affecting prior processing).
- Erase everything: Delete my data (two-step email confirmation).
- Other requests: hello@holaswitch.com.
You also have the right to complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.
9. Cookies
You can review and change your cookie choices anytime via the cookie settings link in our site footer, and via the consent banner shown on first visit. Marketing/analytics cookies — including Google Analytics and Meta Pixel — load only if you accept them. We log cookie consent server-side.
10. Affiliate disclosure
HolaSwitch earns affiliate commissions when you switch through some partner links. This does not change what you pay. Savings figures are computed from your own bill, never guaranteed.
11. Changes
We may update this policy; the "last updated" date reflects the latest version. Material changes will be notified where required.